Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: FYhN1f/OU9EgeERo90RnMYIZ7zU827YHyK7JaGIBhRc=
Subject key identifier: 6A:26:72:1A:BB:B5:FC:AA:4F:5C:40:B9:DB:3F:D1:AB:9B:54:2F:6A
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 0196BE9348D3F84E86661DBDB3A8F774B5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 04CE
Signing time: Sun 11 May 2025 09:00:45 +0000
Manifest this update: Sun 11 May 2025 09:00:45 +0000
Manifest next update: Mon 12 May 2025 09:00:45 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: Cku9YukRwi84+pFvqZ7cbfCgUT9sN/U0W4SMgcOm11U=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:48:d3:f8:4e:86:66:1d:bd:b3:a8:f7:74:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: May 11 09:00:45 2025 GMT
Not After : May 12 09:00:45 2025 GMT
Subject: CN=6a26721abbb5fcaa4f5c40b9db3fd1ab9b542f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:e7:cf:ed:26:1e:e6:f3:ee:0a:0c:8b:7f:
f1:4a:35:d0:f4:61:fd:2e:4f:00:0f:46:19:24:91:
20:2c:c9:c9:64:db:8c:f4:53:db:4b:84:f1:a3:d4:
1d:8b:34:94:ff:7a:95:f2:d3:fd:0d:71:a3:cd:53:
5b:0b:ec:89:42:9c:89:2d:ac:60:8a:64:76:87:aa:
79:f6:53:08:ef:e2:3d:ec:2d:9e:f0:fc:fc:e8:d0:
b8:68:c6:d6:1b:f2:48:47:00:fe:3e:df:79:b2:a0:
b7:70:32:3b:46:8d:6e:08:0b:3c:8b:6b:d6:16:56:
91:75:f7:a6:63:30:41:61:16:e6:7d:75:37:51:e7:
32:d7:6c:97:ee:81:37:9c:1c:ae:6c:fe:3f:74:51:
c9:8b:c3:10:fc:95:dd:1d:25:2c:7e:01:69:f4:73:
cf:68:bf:2d:1c:e0:02:1c:37:c1:a1:ae:14:0a:fd:
53:6f:9f:4c:46:5e:cd:90:e9:28:7d:52:1e:60:3f:
d6:10:de:60:88:6d:8d:e0:54:c9:ee:60:86:df:b5:
86:b2:53:82:e4:d2:ef:ff:9d:51:00:13:43:d1:e4:
7b:48:ba:15:a5:03:91:11:da:52:91:51:c0:5a:b0:
a3:6e:d8:1a:b2:94:08:0c:7b:42:67:1e:9c:3b:27:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:26:72:1A:BB:B5:FC:AA:4F:5C:40:B9:DB:3F:D1:AB:9B:54:2F:6A
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:eb:78:62:09:b1:4f:a1:48:2d:1c:95:06:b2:9c:b8:88:23:
7e:dd:08:d3:7b:05:9d:e7:6c:b5:d2:32:8c:94:e9:f1:46:95:
34:a9:6c:3b:74:80:61:0b:25:2b:17:79:ca:fb:3c:6f:e3:1c:
ed:b5:f1:5f:a4:9a:1c:4c:c5:15:b0:8c:c6:fa:88:65:ea:de:
80:1c:c1:a5:68:16:c7:5b:5c:90:a2:9c:a5:59:dc:4c:0a:4d:
ac:92:30:d5:6c:c3:f1:19:df:7e:ef:96:c1:df:92:89:7a:80:
f5:21:44:00:30:31:71:bc:94:1e:bc:4d:24:b3:0e:7d:10:0a:
f1:48:a0:df:88:4c:69:09:90:ca:3e:56:d0:37:04:41:42:ee:
8a:08:9f:90:dc:00:d5:e9:5d:a2:4f:25:52:5f:46:af:0b:79:
59:be:cc:03:84:44:71:f9:53:7a:9e:55:f9:12:e6:6f:f6:ec:
b7:ca:c2:1f:56:86:07:d4:91:6b:83:ff:6f:a0:81:87:54:fc:
8f:3e:43:e4:da:a9:65:35:27:c3:2a:61:31:cf:5c:1c:61:b5:
8e:bb:b2:05:40:7c:53:73:a5:ef:9f:f8:cd:27:97:1e:83:8f:
96:ac:ee:b6:bf:d2:47:21:44:8a:40:88:68:2d:e1:26:07:70:
ad:2d:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:39:34 2025 by rpki-client